Skip to content
HeyTools

Developer Tools

JWT Decoder

Decode a JSON Web Token’s header and payload in your browser for debugging claims and expiry. Signatures are not verified, and tokens are never uploaded or shared via URL.

Loading tool…

How to use

  1. Paste a JWT
  2. Inspect the decoded header and payload
  3. Copy fields you need—do not share live tokens

Next step

  • JSON Formatter

    Paste JSON to format, validate, and beautify it instantly in your browser. Free online JSON formatter.

  • Base64 Encoder / Decoder

    Encode text to Base64 or decode Base64 back to UTF-8. Useful for data URLs, API payloads, and quick debugging—runs fully in your browser.

Frequently asked questions

Does this verify the signature?

No. It only Base64URL-decodes the header and payload so you can inspect claims. Signature verification belongs in your auth server or library with the correct secret or key.

Is my token sent to a server?

No. Decoding happens entirely in your browser. Prefer that when debugging real access or refresh tokens.

Can I share a JWT via URL?

No. Share links are disabled for this tool so tokens are not written into the address bar or history.